Cyber Security Specialist – Vulnerability Management

Aviva; Bristol; On-site; GBP 39,950 - 54,050; Full time

Benefits offered by this job

Generous pension scheme

Private Medical Benefit

Share scheme

Flexible working

Job summary

Aviva is seeking a Cyber Security Specialist to join our Vulnerability Management team. You will identify, assess and prioritise vulnerabilities across our technology estate, collaborating with technology and business teams to strengthen security controls and reduce attack surface.

The role requires experience in vulnerability management, cloud security (AWS), and working with security tooling such as Tenable.

Qualifications

• Experience in vulnerability management with risk-based prioritisation.
• Hands-on experience with vulnerability scanning tools such as Tenable.
• Experience with AWS environments and cloud security concepts.
• Knowledge of CIS and NIST frameworks and attack surface exposure.
• Experience integrating security tooling with ServiceNow/CMDB; scripting in Python/PowerShell.

Responsibilities

• Identify, assess and prioritise vulnerabilities across the technology estate.
• Lead risk-based prioritisation and remediation efforts.
• Collaborate with technology and business teams to strengthen security controls and reduce attack surface.
• Provide guidance on security best practices and cloud security initiatives.
• Support security assessments and incident response through vulnerability management activities.

Skills

Vulnerability management

Risk-based prioritisation

Security tooling

Cloud security (AWS)

Scripting (Python/PowerShell)

Tenable

CMDB integration

Security frameworks (CIS/NIST)

Incident response

Tools

Tenable

ServiceNow

CMDB

AWS

Job description

Overview

Cyber Security Specialist – Vulnerability Management

Salary: Circa £47,000

Location: Bristol or Norwich

Are you someone who enjoys finding and fixing security weaknesses before they become problems?

We're looking for a Cyber Security Specialist to join our Vulnerability Management team. This role suits someone with experience in vulnerability management, cyber security engineering or cloud security who can operate across a complex technology environment. You will balance technical expertise with strong stakeholder engagement, helping teams understand security risks and drive improvements that make a real difference. If you enjoy solving problems, working with modern security tooling, and taking ownership from identification through to resolution, we'd love to hear from you.

A bit about the job:

Our Vulnerability Management team protects Aviva's systems, networks and data. As a Cyber Security Specialist, you will identify, assess and prioritise vulnerabilities across our technology estate, ensuring security risks are understood and effectively managed. You will work with technology and business teams to strengthen security controls, support security assessments and help reduce our attack surface. You will also provide expert guidance on security best practice, support cloud security initiatives, and help improve how we identify and respond to emerging threats. This is a collaborative role with the opportunity to influence security outcomes across a large organisation while continuing to develop your technical expertise.

Responsibilities

• Identify, assess and prioritise vulnerabilities across the technology estate.
• Lead risk-based prioritisation and vulnerability remediation efforts.
• Collaborate with technology and business teams to strengthen security controls and reduce attack surface.
• Provide guidance on security best practices and cloud security initiatives.
• Support security assessments and incident response through vulnerability management activities.

Qualifications and experience

• Strong experience in vulnerability management, including risk-based prioritisation and vulnerability assessment.
• Hands-on experience with vulnerability scanning tools such as Tenable.
• Experience working with AWS environments and cloud security concepts.
• Knowledge of security frameworks and standards such as CIS and NIST, with understanding of networking and attack surface exposure.
• Experience integrating security tooling with ServiceNow and CMDB platforms, with scripting skills using Python, PowerShell or similar automation tools.

What you’ll get for this role

• Salary Circa: £47,000 (depending on location, skills, experience and qualifications).
• Bonus opportunity up to 10% of annual salary, dependent on performance.
• Generous pension scheme; Aviva contributes up to 14% depending on your contributions.
• 28–29 days holiday plus bank holidays, with option to buy or sell up to 5 days.
• Aviva-funded Private Medical Benefit to support you when needed.
• Discounts on Aviva products and other retailer discounts.
• Up to £1,200 of free Aviva shares per year through our Matching Share Plan and Save As You Earn scheme.
• Supportive policies including parental and carer’s leave.
• Flexible benefits to suit you, including sustainability options such as cycle to work.
• Paid volunteering days and opportunities to participate in Aviva Communities.

We take wellbeing seriously with lots of support and tools.

Take a look to learn more. Put a salary into this calculator to see your total Aviva Reward could be.

Equality, inclusion and flexible working

Aviva is for Everyone: We’re inclusive and welcome applications from all backgrounds and experiences. We encourage you to apply even if you don’t tick every box. We consider all forms of flexible working, including part-time and job shares. We flex locations, hours and patterns to suit customers, the business, and you. Most of our people are smart working—spending at least 50% of their time in our offices each week—balancing flexibility with time together with colleagues.

To find out more about working at Aviva, take a look here.

How to apply

We’d love it if you could submit your application online. If you require an alternative method of applying, please contact Kirthi at 02045922145 or email [e-mail]